Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa
File:                     ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa (raw, json)
Hash identifier:          j4B1497wsa0HtAbpsw6TyYlnB4WZaxMTwtoCE2W7fHI=
Subject key identifier:   A3:BB:3A:90:A0:BF:22:9A:D5:73:DA:0D:B3:0B:49:7D:74:25:C5:75
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B56D71F13DCEE805B85CDB200
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa
Signing time:             Sun 28 Sep 2025 01:00:33 +0000
ROA not before:           Sun 28 Sep 2025 01:00:33 +0000
ROA not after:            Sat 27 Dec 2025 02:00:33 +0000
asID:                     397201
IP address blocks:        192.43.172.30/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:d7:1f:13:dc:ee:80:5b:85:cd:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Sep 28 01:00:33 2025 GMT
            Not After : Dec 27 02:00:33 2025 GMT
        Subject: CN=5099152e-4cc0-486b-adc1-5e8eea08308d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2d:c8:24:58:1c:c4:41:da:48:7e:56:90:0b:
                    f9:20:d3:5d:6d:8e:4f:b7:9f:c1:52:f1:2f:e4:ed:
                    0b:ff:7e:2f:5e:38:dd:2e:3f:f6:2f:ed:97:00:1f:
                    24:41:17:71:cf:75:81:68:d8:1b:01:53:60:54:b9:
                    9c:c3:7a:8c:cb:1a:0b:67:e7:5d:1b:3d:f4:a4:dd:
                    76:02:b8:6c:e2:fa:11:3f:79:2e:55:4b:31:3c:50:
                    10:0a:6a:f4:38:ba:fc:d5:6c:60:22:7e:d4:00:b6:
                    ad:b3:06:92:77:d2:f5:f9:33:bc:fc:2b:5f:72:7f:
                    8a:6f:9c:c1:fb:51:41:65:3b:bb:b3:e4:54:2b:2e:
                    f8:ad:29:63:45:cd:28:cc:18:76:6e:81:65:ab:21:
                    9a:9c:63:fd:66:0d:0e:ab:d9:28:40:43:bc:60:f0:
                    fe:9e:72:2a:52:aa:f8:de:b8:37:e9:22:7e:34:87:
                    c5:a0:48:19:56:77:9d:51:e8:e8:26:41:aa:43:d0:
                    b8:64:f9:8a:8d:d6:66:69:50:c7:7b:36:47:bd:1b:
                    11:2e:7a:c6:c9:ed:7e:00:98:dc:95:d9:80:49:2b:
                    ee:a6:81:54:68:f7:a4:13:34:f8:2a:e1:5f:30:58:
                    8a:2c:88:59:70:88:94:20:f3:fd:b5:e6:64:da:7b:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BB:3A:90:A0:BF:22:9A:D5:73:DA:0D:B3:0B:49:7D:74:25:C5:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ae101ff7-7141-33a6-9e3d-2b05af7f97ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.43.172.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f6:b8:0f:6e:1e:26:18:13:f1:78:c9:0c:57:37:cb:34:8e:
         f1:24:de:e4:04:cd:71:7c:ea:06:25:43:1c:e0:13:f3:45:c8:
         ae:de:bc:5f:35:d8:43:31:ab:ab:61:3c:21:d8:44:88:14:ae:
         ea:91:5a:e4:b4:a5:a6:df:49:ca:cb:13:6a:8a:a7:34:b5:95:
         e8:99:33:9c:86:a4:c9:a0:cc:f3:34:8f:e1:06:67:b5:40:57:
         ee:bf:c2:f2:50:e2:07:5d:1e:b2:ee:68:b4:67:09:bf:5b:e7:
         bc:b6:7f:37:92:59:84:37:f6:a7:6e:3b:c6:ec:4a:88:03:fd:
         bb:76:d9:45:0e:83:ad:8c:21:3e:12:2f:ab:66:19:69:59:71:
         0a:db:1b:6a:a7:62:e9:2b:b2:bb:d4:8f:88:df:c5:58:ed:d6:
         7a:6b:d2:e4:68:2a:f5:ed:19:f4:ad:b0:cb:c2:1e:9f:d6:1a:
         1b:e5:a9:82:df:1b:ba:2d:77:66:04:2a:ad:83:fd:50:fb:ff:
         4a:45:7b:d1:9b:ca:94:13:db:91:ed:4f:da:44:03:73:80:2b:
         b7:b7:98:3f:ee:6d:ca:a1:a4:d4:08:4b:1c:97:cc:65:38:e6:
         40:48:a6:3f:0d:00:28:ae:3e:a3:d2:96:e7:c5:66:0c:d2:46:
         69:47:e3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:24:08 2025 by rpki-client